Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: AthnTCO2hjqH92fpm2rTEFxpcmWBr73moS34gV6pp/M=
Subject key identifier: 70:C8:05:DC:E4:13:F6:91:29:23:D3:55:4B:24:CB:F0:AE:AA:07:F6
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 0198801CFBB9EF0081EC5DEBEABDE6BE6441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 05DD
Signing time: Wed 06 Aug 2025 16:00:39 +0000
Manifest this update: Wed 06 Aug 2025 16:00:39 +0000
Manifest next update: Thu 07 Aug 2025 16:00:39 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: zX3nw0WFa6pAnyg1x7oiZcBE5m6zflreSoCHNhnut3o=)
2: wc2YTTqZu_ZfiRjMD3y02xaUsko.roa (hash: LM/FwSmelKssGweHrskFer212d31QKucqPggfsRe9io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1c:fb:b9:ef:00:81:ec:5d:eb:ea:bd:e6:be:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Aug 6 16:00:39 2025 GMT
Not After : Aug 7 16:00:39 2025 GMT
Subject: CN=70c805dce413f6912923d3554b24cbf0aeaa07f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:dc:c4:0e:77:06:ca:c3:4d:28:b3:ca:a8:
4d:c5:8e:5c:20:c4:c8:87:64:a1:4d:58:63:f3:4d:
f8:b5:5d:51:84:25:ee:66:4f:d1:aa:e4:22:70:5e:
40:01:e8:93:3e:3a:55:10:8c:2a:f3:06:2d:9f:e5:
ab:4a:22:df:86:18:d0:7a:e2:5a:f8:f2:19:cf:6c:
87:d8:e8:19:18:06:a0:cd:57:ba:9c:e6:74:c0:3f:
75:ef:12:18:9a:c6:17:54:fa:5d:be:66:8a:5a:03:
fa:ee:a1:01:98:33:b8:f6:28:d1:40:db:13:32:42:
df:e2:f0:5e:d7:88:38:28:14:cb:dc:ee:f8:b7:32:
18:8e:75:a7:52:bd:11:5c:48:5e:4e:17:ea:8d:ac:
8d:8a:05:e2:ac:f3:7f:65:33:59:73:b0:23:7e:34:
f1:d2:7c:25:79:05:a1:df:e4:31:a5:55:9a:39:bf:
c4:31:33:14:20:b4:f7:df:7b:dc:a6:72:1a:a3:e1:
d5:cd:66:52:e1:91:21:69:14:9c:7c:42:a9:65:b5:
50:20:08:b9:f9:d2:7f:5c:80:7c:fb:97:1a:7b:2e:
98:34:d1:7c:33:46:c1:94:f6:24:8b:fc:a2:fe:38:
e1:ac:65:27:04:02:f8:e6:c8:61:de:d6:20:aa:e3:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:05:DC:E4:13:F6:91:29:23:D3:55:4B:24:CB:F0:AE:AA:07:F6
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:63:bd:5d:47:d4:c0:78:9e:36:e2:40:05:a9:a2:62:ee:22:
ca:74:88:a8:8e:27:37:9a:8a:2c:a1:06:76:a2:1f:b7:d4:89:
bb:aa:b6:64:1e:7b:e5:9e:d6:0a:0c:a9:e9:1b:5b:36:22:d9:
5a:dd:3a:17:79:6a:13:c3:20:ce:d4:b9:8a:57:39:f9:d1:13:
41:ac:ce:fe:4c:64:a5:24:bc:78:19:20:8f:80:f4:aa:16:56:
56:91:58:62:f1:0f:c7:ba:1b:39:95:dd:40:7f:37:bc:ba:62:
57:8b:46:16:2c:e9:ba:19:02:47:72:c5:fb:68:76:7a:c0:3b:
80:43:58:09:de:38:f3:2b:5a:87:80:d7:49:ed:70:03:61:ea:
c6:7c:70:28:1a:b8:96:56:82:ff:3e:c9:3a:4f:25:67:d0:61:
82:1a:ae:25:49:03:2c:21:c2:65:00:16:d0:d9:17:17:e1:ca:
ab:14:c1:29:71:45:6e:55:8e:a2:07:03:03:46:9d:35:bf:d3:
c9:76:92:07:ec:ad:ca:a6:e2:37:79:77:ff:17:cb:0b:c5:d5:
8d:f9:17:3f:9a:5d:45:d6:6b:b2:76:32:3e:6e:f8:d9:5f:47:
29:8a:79:5d:b8:97:3d:28:c1:90:04:96:ef:d3:03:f9:bf:d2:
a0:2e:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:49:32 2025 by rpki-client